Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TqLbQ7kuBbsg1KWodZ9qDdDHn3A.roa
File: TqLbQ7kuBbsg1KWodZ9qDdDHn3A.roa (raw, json)
Hash identifier: TLNENrT4bhT0iwRDIS3hTN9/CNRViNwo8sJ6ESMRQm8=
Subject key identifier: 4E:A2:DB:43:B9:2E:05:BB:20:D4:A5:A8:75:9F:6A:0D:D0:C7:9F:70
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 149B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TqLbQ7kuBbsg1KWodZ9qDdDHn3A.roa
Signing time: Sun 07 Feb 2021 11:59:19 +0000
ROA not before: Sun 07 Feb 2021 11:59:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5275 (0x149b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:59:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4EA2DB43B92E05BB20D4A5A8759F6A0DD0C79F70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:62:70:f2:65:d9:45:63:3d:a9:97:ae:fc:
2e:25:0b:f9:e8:ad:c3:ed:2c:f0:4e:c6:ee:3e:e2:
c0:7b:5e:32:ee:c5:ad:04:cc:30:70:73:2e:35:9e:
b5:53:a2:02:cd:04:93:4e:16:d5:c3:8e:25:f2:86:
28:09:ca:88:03:37:58:5b:d7:98:88:14:95:69:73:
0a:1a:6d:ca:87:03:df:ac:a4:84:06:b8:6d:3e:a7:
aa:13:95:6e:e4:4c:89:42:61:cf:13:27:f9:55:d1:
77:e7:7d:11:1a:e8:d6:42:c0:8b:03:95:75:4e:59:
6b:bb:43:cf:77:fb:b1:2c:76:20:20:8f:d5:26:58:
64:6c:a0:f9:9a:cb:27:bf:b3:2e:de:0b:c1:b8:45:
3c:73:e2:1c:e1:9d:60:1e:16:b8:9d:a7:e8:af:90:
45:9c:28:3e:39:04:93:64:2f:37:54:4a:b7:04:4f:
0e:9f:c3:24:f1:57:de:03:8b:50:7b:10:68:f2:ea:
ac:2f:63:28:f1:81:47:66:f2:97:67:f6:d1:80:2a:
03:43:f0:b2:96:84:ca:2f:4e:03:ea:8a:1d:91:20:
81:1f:93:2a:80:bc:f6:c7:79:3e:c5:8e:ff:19:ce:
b6:1b:03:fe:bc:58:e2:64:ee:aa:f2:69:85:8f:73:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A2:DB:43:B9:2E:05:BB:20:D4:A5:A8:75:9F:6A:0D:D0:C7:9F:70
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TqLbQ7kuBbsg1KWodZ9qDdDHn3A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.46.0/24
Signature Algorithm: sha256WithRSAEncryption
51:49:d9:87:1f:14:f0:7f:1e:4f:8f:44:2f:c3:16:10:d7:59:
ed:5e:7f:31:26:2c:89:a4:a3:ca:d4:2b:60:22:78:90:f6:91:
2d:5e:06:24:dd:fa:a7:c4:82:eb:d2:87:d5:a5:30:ec:63:82:
c5:a2:0a:19:79:ed:2e:99:53:e7:12:13:eb:4d:4a:48:c8:06:
0d:db:9c:ff:02:60:d7:39:b6:7b:79:ad:0d:f2:42:94:e9:2b:
4e:a4:d0:99:d7:9f:96:9d:1d:ae:7c:b8:6e:2d:6d:36:0d:ae:
85:02:fd:2b:54:d7:2a:45:9b:51:4a:7f:ec:b2:aa:8e:bb:4d:
fd:c5:c3:3b:4a:5a:56:a8:bd:03:ce:bf:28:bc:1d:a6:41:eb:
95:e7:50:4f:ea:7d:5f:19:40:89:40:18:f6:27:d0:89:13:1f:
d7:67:13:80:0f:4b:73:1a:61:c7:8f:0d:09:07:4f:a9:b7:94:
1a:14:19:67:7d:8d:4f:ae:7e:ed:a1:5f:1a:2d:0b:ac:fe:7b:
c2:e6:56:46:73:63:cd:87:85:71:e8:71:36:e5:79:17:a9:2a:
10:d9:6f:eb:5f:69:1e:2a:3f:4f:75:14:a7:96:09:cc:33:5b:
95:13:b7:9f:55:4a:86:c0:b3:33:15:42:02:0b:59:3b:f6:55:
d5:3f:e7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org